CONTINUOUS INTERNET TELEMETRY24H DRIFT161 material changesacross 125 domains · -497 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,954 curated domains not answering+1,125 vs yesterdayERRORS25,625 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED73,921 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT161 material changesacross 125 domains · -497 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,954 curated domains not answering+1,125 vs yesterdayERRORS25,625 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED73,921 throttled or blocked our scanner429 rate-limit / 403 bot-block

thefacebook.com

Observed Jul 18, 2026, 13:59 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onFacebook
Email byProofpoint
Registered withRegistrarSEC LLC
Also usesGoogle Search Console
IPv6 · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat thefacebook.com actually stands on - every host below is a signed observation
thefacebook.com
A / AAAA
57.145.2.1412a03:2880:f003:c07:face:b00c:0:2
Facebookserves the site
NS
a.ns.facebook.comb.ns.facebook.comd.ns.facebook.comc.ns.facebook.com
facebook.comanswers its DNS
MX
mxa-00082601.gslb.pphosted.commxb-00082601.gslb.pphosted.com
Proofpointreceives its email

DNS Records

A 1

  • 57.145.2.141

AAAA 1

  • 2a03:2880:f003:c07:face:b00c:0:2

MX 2

  • 10mxa-00082601.gslb.pphosted.com
  • 10mxb-00082601.gslb.pphosted.com

TXT 5

  • google-site-verification=VF3XIAmElLBT8k95SNk47MWw-kX2fd85T4UDtzMjhZY
  • zwCHCnHDnIjisT0O1jm0J96963VBuapt4jNYzBJbk3k+4/UepE+vEY8dG5Ekox2Wftfuu9L6+PyDSnNJiunE7g==
  • MS=ms90237461
  • v=spf1 redirect=_spf.fb.com
  • v=DMARC1; p=reject; pct=100; rua=mailto:a@dmarc.facebookmail.com

NS 4

  • a.ns.facebook.com
  • b.ns.facebook.com
  • d.ns.facebook.com
  • c.ns.facebook.com

SOA 1

  • a.ns.facebook.com dns.facebook.com

CAA 3

  • issuewild "digicert.com"
  • issue "digicert.com"
  • iodef "mailto:ssl@fb.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for thefacebook.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for thefacebook.com <a href="https://domaindrift.io/t/thefacebook.com"> <img src="https://domaindrift.io/badge/thefacebook.com.svg" width="300" height="64" alt="DomainDrift signed observations for thefacebook.com"> </a>

Ed25519 Receipt

Receipt ID
1b8addb1-44a1-455d-9609-c48652f62adb
Output Hash
ec611a2557d08918344106f8511763497be3b319d8d1d0b0dbfc8dddba15d48d
Signature
ed25519:0cb5723ede4644ddcf4461a9cbaa277a0fd678e4591e7ab3c2053af151e2194f895a1816dcdc8c73bdf0ee6a792412e93df078fe42d130331b0e753d38e18107
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser